CVE-2018-1044 In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings

Description

In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings.

Affected products and versions

Product	Affected versions	Fixed in
Moodle 3.x	Versions not published

Other CVEs of Moodle 3.x

The 10 CVEs of Moodle 3.x →

CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker Not rated CVE-2018-1043 In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames Not rated CVE-2018-1045 In Moodle 3.x, there is XSS via a calendar event name Not rated CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course Not rated